Safety, Security & Compliance Requirements

Stages

2. Hazard, Risk & Threat Analysis^A
3. Safety, Security & Compliance Requirements (this stage)^A
4. Architecture & Safety Concept^A

Product, compliance and supply milestones

• Scope and compliance plan agreed (SA)

Engineering and safety milestones

• TR1: Technology feasibility (TF) (technical readiness review TR1)
• Hazard and threat analysis approved (RA)
• Requirements baselined (RB)
• Architecture and safety concept approved (AA)

Disciplines

• Product and program management^A
  • Hazard, Risk & Threat Analysis: maturity 0.3, Early draft. Program running against the agreed integrity and security targets, with their effect on cost and schedule reviewed with lead customers.
  • Safety, Security & Compliance Requirements: maturity 0.5, Draft. Product requirements and plan in force; customer and program reviews track the open safety, security and certification questions, and the datasheet is outlined.
  • Architecture & Safety Concept: maturity 0.5, Draft. Product requirements and plan in force; customer and program reviews track the open safety, security and certification questions, and the datasheet is outlined.
• Functional safety management^A
  • Hazard, Risk & Threat Analysis: maturity 0.3, Early draft. Hazard and risk analysis approved and the target integrity level of each safety function agreed with the customer or system owner.
  • Safety, Security & Compliance Requirements: maturity 0.5, Draft. Safety requirements specification approved; confirmation reviews of the architecture and the design under way.
  • Architecture & Safety Concept: maturity 0.5, Draft. Safety requirements specification approved; confirmation reviews of the architecture and the design under way.
• Product security^A
  • Hazard, Risk & Threat Analysis: maturity 0.3, Early draft. Threat and risk assessment approved, with zones, conduits and target security levels agreed.^A
  • Safety, Security & Compliance Requirements: maturity 0.5, Draft. Security requirements specification approved, and the security architecture drawn up and approved against it.
  • Architecture & Safety Concept: maturity 0.5, Draft. Security requirements specification approved, and the security architecture drawn up and approved against it.
• Product compliance and certification^A
  • Hazard, Risk & Threat Analysis: maturity 0.3, Early draft. Each target market's rules and the bodies to engage listed, with first contacts made.
  • Safety, Security & Compliance Requirements: maturity 0.5, Draft. Product compliance requirements approved, each with the evidence it needs, and the design reviewed against them.^D
  • Architecture & Safety Concept: maturity 0.5, Draft. Product compliance requirements approved, each with the evidence it needs, and the design reviewed against them.
• System and safety architecture^A
  • Hazard, Risk & Threat Analysis: maturity 0.3, Early draft. Product requirements outlined from the hazard and threat analysis, and architecture options for the safety functions sketched.
  • Safety, Security & Compliance Requirements: maturity 0.5, Draft. Product requirements specification baselined and traced to the safety, security and compliance requirements; architecture and partitioning drafted.
  • Architecture & Safety Concept: maturity 0.8, Feature complete. Architecture, safe states and the partitioning between chips, boards and software approved with the safety concept; only changes found in design and analysis from here.; Architecture frozen (milestone for one item)
• Safety analysis^A
  • Hazard, Risk & Threat Analysis: maturity 0.0, Planned. Analysis methods and failure rate sources chosen, and the hazard analysis supported with failure modes of the candidate architecture.
  • Safety, Security & Compliance Requirements: maturity 0.3, Early draft. Safety concept outlined from the safety requirements: the diagnostics and fault tolerance each safety function needs.
  • Architecture & Safety Concept: maturity 0.5, Draft. Safety concept approved with an estimate of the hardware metrics against the target.^A
• Chip and IP design^A
  • Hazard, Risk & Threat Analysis: maturity 0.0, Planned. Chip lead named, and the chips to reuse or develop checked against the hazards and target integrity levels, with the effort estimated; no safety mechanisms outlined yet.
  • Safety, Security & Compliance Requirements: maturity 0.3, Early draft. Chip functions, diagnostics, monitors and safety mechanisms outlined from the safety requirements.
  • Architecture & Safety Concept: maturity 0.5, Draft. Chip architecture agreed with the system architecture and the safety concept; design under way.^O
• Board and power hardware design^A
  • Hazard, Risk & Threat Analysis: maturity 0.0, Planned. Hardware lead named, and the reuse of boards, power stages and approved components estimated for the application profile; no power or isolation needs outlined yet.
  • Safety, Security & Compliance Requirements: maturity 0.3, Early draft. Power, isolation and insulation needs outlined from the hazard analysis and the compliance requirements.
  • Architecture & Safety Concept: maturity 0.5, Draft. Insulation and isolation concept approved with the architecture; schematics under way.
• Firmware and software^D
  • Safety, Security & Compliance Requirements: maturity 0.0, Planned. Software safety and security needs scoped from the requirements, with the software plan, coding standard and tools chosen.
  • Architecture & Safety Concept: maturity 0.3, Early draft. Software architecture and partitioning approved with the system architecture.
• Verification and validation^A
  • Hazard, Risk & Threat Analysis: maturity 0.0, Planned. Verification lead named, and the verification, fault insertion and independence effort the target integrity levels need estimated; no strategy yet.
  • Safety, Security & Compliance Requirements: maturity 0.3, Early draft. Verification strategy outlined with the requirements: a method for every requirement and the independence each needs.
  • Architecture & Safety Concept: maturity 0.5, Draft. Verification and validation plan approved; test benches, fault insertion set-ups and test cases being built alongside the design.
• Long-life supply and obsolescence^A
  • Hazard, Risk & Threat Analysis: maturity 0.0, Planned. Supply life plan agreed with the business: the support period and the long-life needs of the product.
  • Safety, Security & Compliance Requirements: maturity 0.3, Early draft. Long-life component and supplier strategy outlined for the architecture.
  • Architecture & Safety Concept: maturity 0.3, Early draft. Long-life component and supplier strategy outlined for the architecture.